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IN THE CLAIMS : 

Please amend the claims as indicated below, 

1 . (Cun ently Amended) A method for evaluating a passwor d pr oposed by a user diuing an 
enrollment process, comprising: 

receiving said proposed password from said user; 

performing an Internet search using a query containing one or more keywords derived 
from said proposed password: 

evaluating results of said search relative to one or more predefined thresholds; and 

rejecting said proposed password when ensuring; that said user' carmot be is correlated 
with said pr oposed password based on one or more predefined correlation rules if one or more of said 
predefined thresholds are exceeded by said results 

2 . (Original) The method of claim 1 , wherein said one or more predefined correlation rules 
evaluate whether that said proposed password can be qualitatively correlated with said usei'. 

3 . (Original) The method of claim 1, wherein said one oi more predefined correlation rules 
evaluate whether said proposed password can be quantitatively correlated with said user- 

4. (Original) The method of claim 1, wherein said proposed password is comprised of a 
proposed answer and a proposed hint and wherein said one or more predefined correlation rules 
evaluate whether' said proposed answer can be correlated with said proposed hint in a particular 
relation. 

5., (Original) The method of claim 4, wherein said particular relation is selected from the 

group consisting essentially of: self, fiamily member, co-author", teammate, colleague, neighbor, 
community member or household member . 
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6 . (Original) The method of claim 1, wherein said proposed password is comprised of a 

proposed answer and a proposed hint and wheiein said one or moie predefined coiielation rules 
evaluate whethei said proposed answer can be obtained from said proposed hint., 

7, (Original) The method of claim 1, wheiein said proposed password is an identifying 
number 

8 . (Original) The method of claim 7, wherein said one or more predefined correlation rules 
evaluate whether said identifying number identifies a person in a particular- relationship to said user . 

9 (Original) The method of claim 1, wherein said one or mote predefined correlation rules 

evaluate whether said identifying number is a top N most commonly used identifying number 

1 0 . (Original) The method of claim 7, wherein said one or more predefined correlation rules 

evaluate whether said identifying number- identifies a top N commercial entity., 

1 1 ,. (Original) The method of claim 7, wherein said one or more pr edefined correlation rules 

evaluate whether said identifying number identifies said user., 

12 (Original) The method of claim 7, wherein said identifying number- is a portion of a 

telephone number-.. 

13 . (Original) The method of claim 7, wherein said identifying number- is a portion of an 

address. 

14., (Original) The method of claim 7, wherein said identifying number- is a portion of social 

security number 

15 (Original) The method of claim 1, wherein said pr oposed password is a word., 

16.. (Original) The method of claim 15, wherein said one or mor e predefined correlation 

rules evaluate whether a correlation between said word and said user' exceeds a predefined threshold. 



3 



503048-US-CIP (Bagga) 
Confirniation No 7508 

1 7 . (Or iginal) The method of claim 1, whei ein said coiielation is determined by performing 

a meta-search. 

18., (Original) The method of claim 1, wherein said step ofensnTing a conelation further 

compiises the step of per forming a meta-sear'ch., 

19. (Original) The method of claim 1, wherein said step of ensuring a correlation further 
comprises the step of performing a local proximity evaluation., 

20. (Original) The method of claim 1, wherein said step of ensuring a conelation further 
comprises the step of performing a number classification 

2 1 . (Curr ently Amended) An appar atus for' evaluating a passwor d pr oposed by a user dm ing 
an enrollment process, comprising: 

a memory; and 

at least one processor, coupled to the memory, operative to: 
receive said proposed password from said user; 

perform an Internet search using a query containing one or more keywords derived from 

said proposed password; 

evaluate results of said search relative to one or more predefined thresholds: and 
reject said proposed password when ensure that said user- carmot b e is con elated with 

said proposed password bas e d on one or more pr e defined corr e lationn^t es if one or more of said 

predefined thresholds are exceeded by said results . 

22., (Original) The appar atus of claim 2 1 , wherein said one or more predefined correlation 

rules evaluate whether- said proposed password can be corielated with said user , 

23 . (Original) The apparatus of claim 2 1 , wherein said proposed passwoid is comprised of a 

proposed answer and a proposed hint and wherein said one or' more predefined conelation rules 
evaluate whether said proposed answer can be correlated with said proposed hint in a particular 
relation 
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24 , (Original) The apparatus of claim 2 1 , wherein said proposed password is comprised of a 
proposed answer and a proposed hint and wherein said one or more predefined correlation rules 
evaluate whether said proposed answer can be obtained fiom said proposed hint. 

25 . (Original) The appar atiis of claim 2 1 , wherein said proposed password is an identifying 

number,. 

26 , (Original) The apparatus of claim 25, wherein said one or more predefined correlation 
rules evaluate whether said identifying number identifies a person in a particular' relationship to said 

user., 

27 . (Currently Amended) An article of manufacture for evaluating a passwor d proposed by a 
user during an enrollment process, comprising a machine readable storage medium containing one or 
more programs which when executed implement the steps of: 

receiving said proposed password from said user; 

performing an Internet search using a query containing one or more keywor ds derived 

from said proposed password; 

evaluating results of said search relative to one or more predefined thresholds; and 
rejecting said pr oposed password when e nsuring that said user cannot be is correlated 

with said pr oposed password based on on e or more predefined correlation rules if one or more of said 

predefined thresholds are exceeded bv said results 
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